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Abstract 

We classify Moufang loops of order 64 and 81 up to isomorphism, using a linear algebraic 
approach to central loop extensions. In addition to the 267 groups of order 64, there are 4262 
nonassociative Moufang loops of order 64. In addition to the 15 groups of order 81, there are 5 
nonassociative Moufang loops of order 81, 2 of which are commutative. 
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1. Introduction 

1.1. Mathematical background 

Let Q be a set with one binary operation, denoted by juxtaposition. For x € Q, define 
the left translation Lx and the right translation Rx by Lx(y) = xy, Rx{y) = yx. Then 
Q is a loop if all translations are bijections of Q, and if Q possesses a neutral element 1 
satisfying lx = x = x\ for every x G Q. 

A loop Q is Moufang if it satisfies the Moufang identity {xy){zx) = x{{yz)x). Although 
Moufang loops are not associative in general, they have many properties we are familiar 
with from the theory of groups. For instance, every element a: of a Moufang loop is 
paired with its inverse x~^ satisfying x~^{xy) = y = {yx)x~^, any two elements generate 
a subgroup (this property is called diassociativity), and any three elements that associate 
generate a subgroup (the famous Moufang theorem). 

Indeed, the fact that the methods used in this paper work for Moufang loops can be 
seen as another confirmation of their proximity to groups. 
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The center Z{Q) of a loop Q consist of all elements that commute and associate with 
all other elements of Q. A subloop S' of a loop Q is a nonempty subset of Q that happens 
to be a loop with respect to the multiplication inherited from Q. To see whether a subset 
S 7 ^ 0 of a Moufang loop Q is a subloop of Qj it suffices to check that S is closed under 
multiplication and inverses. 

A subloop S of a loop Q is normal in Q if S is invariant under all inner maps R~yRyRx, 
LyxLyLx and L~^Rx. The center Z{Q) is a normal subloop of Q. 

A loop Q is centrally nilpotent if the sequence 


g, QIZ{Q), {QIZ{Q))IZ{QIZ{Q)),... 
eventually yields the trivial loop. 

Loops of order p a, prime, are known as p-loops. A finite Moufang loop g is a 
p-loop if and only if every element of Q has order that is a power of p. 

Let g be a centrally nilpotent p-loop. The Frattini subloop ^{Q) of Q is the intersection 
of all maximal subloops of Q, or, equivalently, the subloop consisting of all non-generators 
of g. Then Q/^{Q) is an elementary abel ian p-g r oup a nd |g/$(g)| = p‘^, where d is the 
size of a smallest generating set of g, by ( Bruck . ll97lL Theorem 2.3). 

An isotopism of loops Qi, Q 2 is a triple (a,/3,7) of bijections Qi —>■ Q 2 such that 
a{x)i3{y) = jixy) holds for every x, y G Qi. Then Q 2 is an isotope of Qi. 

Clearly, when two loops are isomorphic, they are also isotopic. The converse is not 
true in general. If all isotopes of a loop Q are already isomorphic to Q, we call Q a 
G-loop (since groups have this property). Moufang 2-loops are G-loops, and that is why 
a classification of such loo ps up to isom orphis m is also a classifi cation up to isotopism. 

We refer the reader to ( Bruckl . Il97lh and ( Pfiugfeldei . 1990ll for a systematic intro¬ 
duction to the theory of loops. 


1.2. Historical background 

The classif ication of Moufang loops started in earnest with the work of Chein. In 
( Cheinl . Il978ll . he described all Moufang loops of order les s than 64. Chein’s results 
are conveniently summarized in ( Goodaire. May and Ramanl 199^. and the respective 
loops are accessible in electronic form in (|Nagv and Voitechovskti l2007^ . Table 1 gives 
the number of pairwise nonisomorphic nonassociative Moufang loops of order n for every 
1 < n < 63 for which at least one nonassociative Moufang loop exists. 

Table 1. The number M{n) of nonassociative Moufang loops of order n less than 64. 


n 

12 16 

20 

24 

28 

32 

36 

40 

42 44 

48 

52 

54 

56 

60 

M{n) 

1 5 

1 

5 

1 

71 

4 

5 

1 1 

51 

1 

2 

4 

5 


Gertain extensions th at proved useful in g roup theory, see ( Drapall . 2003 1. were used 


set ul m g : 

^ l 2006 ll 


t o construct 4262 non associative Moufang 


2006h that no additional 


by the second author in (jVoitechovs^ 

loops of order 64. It was also conjectured in (|Voitechovskv . 
nonassociative Moufang loops of order 64 exist. 

The related question “For which integers n there exists a nonassociative Moufang loop 
of ord er n ?” has been studied extensively but is not fully resolved. 

By ( Ghein and R,aiab . 2003ll . a nonassociative Moufang loop of order 2m exists if and 
only if a nonabelian group of order m exists. Hence, a nonassociative Moufang loop of 
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order 2^ exists if and only if A: > 3, and for every odd m > 1 there is a nonassociative 
Moufang loop of order 4m. Here is the case 2m, m odd: 


Theorem 1 (Chein and Rajah, 2003, Corollary 2.4). Every Moufang loop of order 2m, 
m > 1 odd, is associative if and only if m = ■ ■ ■p^'‘, where pi < • • • < pk are odd 

primes and where 

(i) ai < 2, for all i = 1, ..., k, 

(a) pj ^ 1 (mod Pi), for any i and j, 

(Hi) Pj ^ 1 (mod Pi), for any i and any j with aj =2. 

Concerning odd orders, we have: 


Theorem 2 (Leong and Rajah, 1997). Every Moufang loop of order p°‘q(^ ''' 
associative if p < qi < • ■ • < qu are odd primes, and if one of the following conditions 
holds: 

(i) a < 3 and ai < 2, 

(a) P > 5, a < 4, and ai < 2. 


In ( Raiahl . 200lh . Rajah showed that for odd primes p < q a. nonassociative Mo¬ 
ufang loop of order pq^ exists if and only li q = 1 (mod p). It is well-known that there 
are nonassociative Moufang loops of order 3f. Indeed , smallest nonassociative commuta¬ 
tive Moufang loo ps are of order 3^— see Bh9.37ll for the first example attributed to 
Zassenhaus, and ( Kenka and Nem^ . 198l fi~for t he second nonassociative commutative 
Moufang loop of order 3"^. Wright ( Wrightl . Il965ll constructed a nonassociative Moufang 
loo p of order for every prim e p. Coming back to the classification results, it is shown 
in ( Nagy and Valsecchi 1200711 that there are precisely 4 nonassociative Moufang loops 
of order p^ for every prime p > 5. 


1.3. Main result 


In this paper we verify computationally: 

Theorem 3. There are 4262 pairwise nonisomorphic nonassociative Moufang loops of 
order 64. 


Theorem 4. There are 5 pairwise nonisomorphic nonassociative Moufang loops of order 
81, 2 of which are commutative. All 5 of these loops are isotopes of the 2 commutative 
ones. 


Here is our strategy, completely different from that of ( Voitechovskv . 2006ll : 

Every Moufang loop Q of order p a prime, is a central extension of a Moufang 

loop K of order p^ by the p-element field Fp, by Corollary 13. Moreover, if K is at most 
two-generated, then Q is associative, by Proposition 8. Therefore, in order to determine 
all nonassociative Moufang loops of order p^+^ one only needs to consider all central 
extensions of at least three-generated Moufang loops K of order p^ by Fp. 

Each such extension is determined by a Moufang cocycle, a map KxK —>• Fp satisfying 
certain cocycle identities (2.1), (2.2). All cocycles K x K ^ ¥p form a vector space C{K) 
of dimension p^^ — 2p^ -|- 1, and the Moufang cocycles form a subspace A4{K) of C{K). 

Let B{K) be the subspace of coboundaries K x K ^ Fp, as defined in (2.3). Every 
coboundary is a Moufang cocycle, by Lemma 10, so M{K) decomposes as B{K) ®'D{K) 


3 
































for some V(K). The system of linear equations whose solution determines M.{K) has 
about equations in variables. The subspace B{K) can be constructed directly, 
and its dimension can be determined by means of generators of K, cf. Lemma 11. 

Since two cocycles that differ by a coboundary give rise to isomorphic loops, by Lemma 
9, the study of central Moufang extensions of K by Fp reduces to the study of the vector 
space 'D{K). 

When the dimension of 'D{K) is small, it is possible to calculate all cocycles of 'D{K), 
to construct the corresponding extensions, and to test the resulting Moufang loops for 
isomorphism. (The isomorphism test is a nontrivial pro blem, but the ad ho c invariants 
used in the LOOPS package prove sufficient here. See ( Voitechovskvl l200fi[l for a brief 
description of the invariants used in the isomorphism test.) 

Fortunately—and somewhat unexpectedly—the dimension of T>{K) happens to be 
low for every Moufang loop K of order 32 and 27, with the exception of the elementary 
abelian 2-group of order 32. We do not know how to estimate the dimension of 'D{K) 
(and hence of M{K)) theoretically. See Section 3 for more. 

To speed up the search, we can further reduce the number of cocycles from T>{K) that 
need to be considered by taking advantage of the action of the automorphism group of 
K on M{K), as described in Section 4. 

The troublesome case where K is the elementary abelian group of order 32 has to be 
handled separately. Central extensions of elementary abelian 2-groups by F 2 are known 
as code loops —a well-studied variety of Moufang loops with a rich interplay between the 
associator map, the commutator map, and the squaring map. We take advantage of this 
interplay (combinatorial polarization), and finish the search, as explained in Section 5. 


2. Central extensions 

Let K, A be loops. Then a loop Q is an extension of iL by ^ if ^ is a normal subloop 
of Q such that Q/A is isomorphic to K. An extension Q of AT by A is central if A is a 
subloop of Z{Q). 

Let us call a map f : K x K ^ A satisfying 

/(l,x) = /(x,l) = l (2.1) 

a (loop) cocycle. 

Proposition 5. Let K he a loop, A an abelian group, and f : K x K ^ A a eoeycle. 
Define multiplication * on K x A by 

{x,a) * {y,b) = {xy, abf{x,y)). 

Then Q = {K x A, *) is a loop, in fact a central extension of K by A. 

Proof. It is easy to see that Q is a quasigroup. The cocycle condition (2.1) guarantees 
that Q has a neutral element, namely (1,1), and that 1 x A < Z{Q). □ 

We denote the resulting central extension by E{K, A, /). 

The following result belongs to loop-theoretical folklore: 

Theorem 6 (Central extensions for loops.). Let Q, K and A be loops such that A < 
Z{Q). Then Q is a central extension of A by K if and only if there is a cocycle f : 
K X K ^ A such that Q is isomorphic to E{K, A, /). 
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Proof. Note that A is an abelian group because A < Z{Q). If Q is isomorphic to 
E{K, A, /), then Proposition 5 shows that Q is a central extension of K by A. 

Assume that Q is a central extension of K by A. Let : K ^ Q/Ahe a.n isomorphism, 
and let cr : AT —>■ (5 be any map such that a(x) G 'f’ix) and (t( 1) = 1. Then every element 
of Q can be written uniquely as a{x)a for some x € K and a G A. Since A is a central 
subloop, we have {a{x)a){a{y)b) = (a{x)a{y)){ab). As u(x)a(y) G xf{x)xf{y) = '4>{xy) and 
o{xy) G 'ip{xy), we have {a{x)a{y)){ab) = a{xy)abf(x,y) for some unique f{x,y) G A. It 
is now easy to check that the map / : AT x AT —)■ A so defined is a cocycle. □ 

Using the Moufang identity (xy)(zx) = x{{yz)x), we obtain by straightforward calcu¬ 
lation: 

Proposition 7. Let K he a loop, A an abelian group, and f : K x K ^ A a cocycle. 
Then E(K, A, /) is a Moufang loop if and only if K is a Moufang loop and f satisfies 

f{xy, zx)f{x, y)f{z, x) = f{x, (yz)x)f{yz, x)f{y, z) (2.2) 

for all X, y, z € K. 

We call a cocycle f : K x K ^ A satisfying (2.2) a Moufang cocycle. 

It is not necessary to consider all groups while looking for nonassociative Moufang 
central extensions: 

Proposition 8. Let Q be a diassociative loop, and let A < Z{Q) be such that Q/A has 
a generating subset of size at most 2. Then Q is a group. 

Proof. Let x, y G Q he such that Q/A is generated by {xA,yA}. Let H be the subloop 
of Q generated by {x,y}. Since Q is diassociative, H is a group. Moreover, HA/A is 
a subloop of Q/A containing {xA,yA}, thus HA/A = Q/A and HA = Q. For hi, h 2 , 
hs G H and oi, 02, 03 G A, we have (/iiai)((h 2 a 2 )(h 3 a 3 )) = (hi(h 2 h 3 ))(aia 2 a 3 ) = 
((hih 2 )h^)(aia 2 az) = {(hiai)(h 2 a 2 )){hza^) because A is central and H is a group. Thus 
(5 is a group. □ 

Let A' be a loop and A an abelian group. Given a map t : A' —> A, denote by 
St : K X K ^ A the map defined by 

ST{x,y) =T{xy)T{x)~^T{y)~^. (2.3) 

Observe that St is a cocycle if and only if t( 1) = 1. We call a cocycle of the form St 
(necessarily with r(l) = 1) a coboundary. 

From now on we denote the operation in the abelian group A additively and let 0 be 
the neutral element of A. 

Lemma 9. Let K be a loop, A an abelian group, and f, g : K x K ^ A cocycles. If 
g — f is a coboundary then E{K,A,f) is isomorphic to E{K,A,g). 

Proof. Denote the multiplication in E{K, A, /) by *, and the multiplication in E{K, A, g) 
by o. Let g — f = St lor some t : K ^ A. Define if : E{K,A,f) -G E{K,A,g) by 
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^(x, a) = {x,a + t(x)). Then ip is clearly one-to-one, and ipix, a — t(x)) = (x, a) shows 
that ip is also onto. Now, 

■p{{x, a) * {y, b)) = ip(xy, a + h + f(x, y)) 

= {xy, a + b + f{x, y) + T{xy)) = {xy, a + b + g{x, y) -h t{x) + T{y)) 

= {x,a + t{x)) o{y,b + T{y)) = ip{x, a) o ip{jj^ h), 

and we are through. □ 

The converse of Lemma 9 is not true in general. We have: 

Lemma 10. Let K he a Moufang loop, A an abelian group, and St : K x K ^ A a 
coboundary. Then St is a Moufang cocycle. 

Proof. We need to show that (2.2) holds for St, that is 

ST{xy, zx) + St{x, y) + St{z, x) = St{x, (yz)x) + Sx^yz, x) -\- ST{y, z). 

This is equivalent to 

T{{xy){zx)) — T{xy) — t{zx) + T{xy) — t(x) — T{y) + t{zx) — t{z) — t(x) 

= r{x{{yz)x)) - t{x) - T{{yz)x) -f T{{yz)x) - T{yz) - t{x) + T{yz) - T{y) - t{z), 

which holds because K is Moufang. □ 


3. Nonequivalent cocycles 

Let Fp = {0,... ,p — 1} be the p-element field and K a Moufang loop. The cocycles 
KxK —>■ Fp form a vector space C{K) over Fp, Moufang cocycles form a subspace M{K) 
of C{K), and coboundaries form a subspace B{K) of M{K), by Lemma 10. 

We say that two cocycles f, g : K x K ^Wp are equivalent if / — (/ is a coboundary. 
Let n = \K\^, and let b : K x K —> {1,..., n} be a fixed bijection. Let vi, ..., 
be variables. Identify the cocycle f : K x K ^ Vp with a vector (/i, ..., /„) of Fp by 
letting fb(x,y) = fix,y). An identity for /, such as (2.2), can then be translated into a 
set of equations in Fp [ui,..., w„]. 

For instance, the cocycle identities /(l,x) = 0, f(x, 1) = 0 give rise to the 2\K\ — 1 
linear equations 

Vb{i,x) = 0, Vb(x,i) = 0, for X G K. (3.1) 

Since the equations of (3.1) are linearly independent, we have dim(C(iF)) = 11^1^—211^1 -|- 

1. 

The subspace B{K) of coboundaries can be described directly. For 1 x G K let 
Tx : K ^ ¥p he the map 

, , I 1, if y = a;, 

Tx[y) = < 

I 0, otherwise. 

Then {tj,; 1 ^ x G K} Is & basis of the vector space of all maps K ^ ¥p. Since the 
operator S ■. t ^ St Is linear, B{K) is generated by {Stx] I ^ x G K}, and thus 
dim(,B(lF)) < \K\ — 1. In fact: 
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Lemma 11. Let Q be a Moufang p-loop of order p^, and let d be the size of a minimal 
generating set of Q. Let B{Q) = {i5t; t : Q ^ Fp, r(l) = 0} be the vector space of 
coboundaries. Then dim(6((5)) = p'^ — I — d. Eguivalently, \Q/^{Q)\ = , 

where d)(Q) is the Frattini subloop of Q. 


Proof. We know that |Q/d)((5)| = p^^. Note that 5 : r i—>■ is a homomorphism onto 

B{Q) with ker5 = Hom(Q,Fp). 

Consider the map if : Hom((5/$((5),Fp) —>■ Hom((5,Fp) defined by 

= f{x<i>{Q)). 

Then is a monomorphism, and we claim that it is onto. Consider / S Hom(Q,Fp). 
Since dim(Fp) = 1, ker/ is either all of Q or it is a maximal subloop of Q. In any case, 
<i)(Q) < ker/. Then / : Q/^{Q) —>• Fp, x^{Q) i-5> f{x) is a well-defined homomorphism, 
and ipiDix) = J{x^{Q)) = fix), so ip(f) = f. 

Q/^iQ) is a vector space of dimension d, and thus its dual Hom((5/$((5), Fp) has also 
dimension d. Hence Hom((3,Fp) has dimension d, by the above paragraph. Altogether, 
dim(im^) = dim(F^) — dim(Hom((5,Fp)) = p^ — d. We have dim(S((5)) = dim(im5) — 1 
due to the requirement that every coboundary is of the form 5 t for some r satisfying 
r(l) = 0. □ 

We now determine A4{K). The Moufang cocycle identity (2.2) gives rise to the \K\^ 
linear equations 


'^b{xy,zx) T '^b{x,y) T '^b(z,x) '^b{x,{yz)x) '^b{yz,x) '^b{y,z) — 0: ^ ^ A", (3.2) 

necessarily linearly dependent. The subspace M[K) of Moufang cocycles is obtained by 
solving the system of linear equations (3.1) combined with (3.2). 

The main reason why Moufang jp-loo ps are somewhat amenable to enumer ation is the 
following result, cf. ( Glauberman . 1968^ and ( Glauberman and Wright . 1968 1: 


Theorem 12. Moufang p-loops are centrally nilpotent. 


In particular: 


Corollary 13. A nontrivial Moufang p-loop contains a central subgroup of order p. 

Proof. Let Q be a Moufang p-loop of order at least p. Since Q is centrally nilpotent, its 
center ZiQ) is nontrivial. Then ZiQ) is ap-group of order at least p, and so it contains an 
element of order p. This element generates a central subgroup (hence normal subgroup) 
of order p. □ 

Civen a Moufang p-loop K, choose L){K) so that M.{K) = BiK) © V{K). 

Among the 51 groups of order 32, 20 are two-generated, including the cyclic group. No 
nonassociative Moufang loop is two-generated, thanks to diassociativity. Thus, in order 
to obtain all Moufang loops of order 64 up to isomorphism, it suffices to construct all 
extensions E{K, F 2 , /), where K is one of the 71 + 51 — 20 = 102 Moufang loops of order 
32 that are not two-generated, and where / is chosen from T>iK). 

It is not clear how to estimate the dimension of M{K) (and hence of ViK)) theoreti¬ 
cally. Table 2 gives the dimensions of M{K) and B{K) for every Moufang loop of order 
32 that is not two-generated. The ith Moufang loop of order 32 in the table corresponds 
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Table 2. Dimensions of Moufang cocycles Ai{K) and coboundaries B{K) for all Monfang loops 
K of order 32 that are not two-generated. 


loop K 

1 2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

dim(At(A)) 

41 40 

40 

36 

35 

34 35 

34 34 40 

40 

40 

40 

40 

40 

40 

dim(B(A)) 

27 27 

27 

28 

28 

28 

28 

28 

28 

27 

27 

27 

27 

27 

27 

27 

loop K 

17 18 

19 

20 

21 

22 

23 

24 

25 

26 

27 

28 

29 

30 

31 

32 

dim(At(A)) 

40 40 

40 

40 

40 

40 

34 34 34 34 34 34 34 34 34 34 

dim(B(A)) 

27 27 

27 

27 

27 

27 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

loop K 

33 34 35 

36 

37 38 

39 

40 

41 

42 

43 

44 45 

46 

47 48 

dim(M((A)) 

34 34 34 34 34 34 34 34 34 33 

33 

33 

33 

33 

34 34 

dim(B(A)) 

28 28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

loop K 

49 50 

51 

52 

53 

54 

55 

56 

57 

58 

59 

60 

61 

62 

63 

64 

dim(Af(A)) 

33 34 34 33 

33 

34 34 34 34 33 

33 

35 

34 34 34 34 

dim(B(A)) 

28 28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

loop K 

65 66 

67 68 

69 

70 

71 











34 33 

34 34 35 

35 

34 










dim(B(A)) 

28 28 

28 

28 

28 

28 

28 










group K 

21 22 

23 

24 

25 

26 

27 

28 

29 

30 

31 

32 

33 

34 35 

36 

dim(At(A)) 

35 36 

35 

34 35 

34 36 

35 

34 34 34 33 

33 

35 

34 35 

dim(B(A)) 

28 28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

28 

group K 

37 38 

39 

40 

41 

42 

43 

44 45 

46 

47 48 

49 

50 

51 


dim(At(A)) 

34 34 35 

34 34 34 34 34 41 

41 

40 

40 

40 

40 

51 


dim(B(A)) 

28 28 

28 

28 

28 

28 

28 

28 

27 

27 

27 

27 

27 

27 

26 



to the ith Moufang loop of order 32 in ( Goodaire. May and Raman . 1999ll and to the ith 
Moufang loop of order 32 in LOOPS, where it can be retrieved as MoufcLiigLoop( 32,i) . 
The ith group of order 32 in the table corresponds to the ith group of order 32 in (IGAPi . 
l2006h . where it can be retrieved as SmallGroup(32,i). 

Note that for every Moufang loop K listed in Table 2 we have d\T[v{V{K)) < 14, with 
the exception of the elementary abelian group of order 32 (the last group in the table). 

As for the Moufang loops of order 81, the only group K of order 27 that is not two¬ 
generated is the elementary abelian group. We have dim(i3(Ar)) = 23 by Lemma 11, and 
a short computer calculation yields dim(Al(Ar)) = 30. This means that the classification 
of nonassociative Moufang loops of order 81 is an easy task, indeed, for a computer. 


4. Cocycles and the automorphism group 

Let AT be a loop and A an abelian group. The automorphism group Aut(Ar) acts on 
C{K) hy f ^ /“, where f°‘ix,y) = f {a{x), a{y)). 



















Lemma 14. Let K be a loop, A an abelian group, f : K x K ^ A a cocycle, and 
a € Aut(if). Then E{K, A, f) is isomorphic to E{K, A, f^). 

Proof. Define -if : E{K,A,f°') E{K,A,f) by {x,a) i-)- (a(a::),a). Denote the product 
in E{K, A, /“) by * and the product in E{K, A, /) by o. Then 

a) * {y, b)) = tfixy, a + & + /“(x, y)) = ia{xy), a + b + /“{x, y)) 

= {a{x)a{y), a + b + /(a(x), a{y))) = (a(x), a) o {a{y),b) = if{x, a) o ^{y, b). 

Since ip is clearly a bijection, we are done. □ 

We can therefore use the action of the automorphism group to reduce the number of 
nonequivalent cocycles that need to be taken into consideration. Let us return to the 
Moufang case, extending a Moufang loop K by Fp. 

Set X = % and Y = 'D{K). Until Y is empty, repeat the following: Pick f G Y and 
insert it into X. For every a S Aut(K), calculate /“. Decompose /“ = Pa + ha, where 
Pa G B{K) and ha G D(Ar). Remove ha from Y, if possible. 

We claim that all extensions of K by Fp are obtained if only cocycles from X are 
considered. To see this, note that E{K, A, /) is isomorphic to E{K, A, /“) by Lemma 14, 
and that E{K,A,f°‘) is in turn isomorphic to E{K,A,ha), because f°' — ha = Pa is a 
coboundary. 

The size of X is often much smaller than the size of V^K). For instance, for K = 
MoufangLoop(32,1) we have \X\ = 246 (or about 1.5 percent of \'D{K)\ = 2^^), for 
K = MoufangLoop(32,71) we have \X\ = 20 (31.3 percent), for K = Z 32 we have 
|A| = 2 (100 percent), for K = SmallGroup(32,50) we have |A| = 138 (1.7 percent), 
and for K the elementary abelian group of order 27 we have |A| = 11 (0.5 percent). 


5. The elementary abelian case in characteristic two 


When K is the elementary abelian group of order 32, the dimension of D(Ar) is pro¬ 
hibitively large, equal to 25. In this section we describe how this case was handled in the 
search. 

As we have already mentioned, Moufang 2-loops Q with a central subloop Z of order 
2 such that V = QfZ is an elementary abelia n group are k nown as code loops. The 
first code loop is due to Parker, as discussed in ( Conwavlll985ll. and the first systematic 


exposition of code loops can be found in (|Griesi 


1986h . 


Let Q be a code loop, Z < Z(Q), jZj = 2, V = QjZ elementary abelian. For x,y &Q, 
denote by [x, y] the commutator of x, y, that is, the unique element u of Q such that 
xy = {yx)u. For x, y, z & Q, denote by [x,y,z] the associator of x, y, z, that is, the 
unique element x of Q such that {xy)z = (x{yz))v. 

The three maps 

P : Q ^ Q, X x^ (power map), 

C : Q X Q ^ Q, {x,y) ^ [x,y] (commutator map), 

A: QxQxQ^Q, {x,y,z) [x, y, zj (associator map) 

can in fact be considered as maps 

P-.V ^Z, C:VxV^Z, A:V xV xV ^ Z, 
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and therefore identified with forms from the vector space V to the field F 2 . 

The three forms are related by combinatorial polarization: A is a trilinear alternating 
form, 

C(x, y) = P{x + y)- P{x) - P{y), 

and 


A{x, y, z) = C{x + y,z)- C{x, z) - C{y, z) 

= P{x + y + z) - P{x + y) - P{x + z) - P{y + z) P P{x) + P{y) + P{z). 


We digress for a while to give more details on combinator i al pol arizati on. The mat erial 
of Subsection 5.1 is taken from ( Drapal and Voitechovskv , 2007 1. See ( Ward . 1979ll for 
an introduction to combinatorial polarization. 


5.1. Combinatorial polarization 

Let y be a vector space over the p-element field Fp, p a prime. For a map a '.V ^ Fp 
and n > 1 define a„ : 1 ^" —>■ Fp by 

^ H-(5.1) 

where a{%) — 0. Then is clearly a symmetric form, called the nth derived form of a. 
We say that a = Oi, 0 : 2 , 03 , ... are related by polarization. 

The combinatorial degree of a : V —>■ Fp is the largest integer n such that an 0 and 
am = 0 for every to > n, if it exists. 

The dehning identity (5.1) is equivalent to the recurrence relation 

a„(u,u, W 3 , .. .,Wn) 

= an-l(u + U, UI 3 , . . . , Wn) - an-l(u, UI 3 , . . . , Wn) - a„-i(v, W 3 , . ■ ■ , Wn) ■ (5.2) 

We see from (5.2) that the combinatorial degree of a is equal to n if and only if q;„ 7 ^ 0 is 
a symmetric n-linear form (since Fp is a prime field). Moreover, an easy induction proves: 

Lemma 15. Let V be a vector space over Fp and a : V ^ ¥p a map satisfying q;(0) = 0. 
Then q:„(0, M 2 , • • ■, Un) = 0 for every M 2 , ..., Un &V. 

Proposition 16. Let V be a vector space over Fp with basis B = {ei, ..., e^}. Let 
a : V ¥p be a map of combinatorial degree n. Then the following conditions are 
equivalent: 

(i) q;(mi), a 2 {ui,U 2 ), ..., a„(Mi,..., Un) are known for every ui, ..., Un € V, 

(ii) a(Mi), a 2 (Mi, M 2 ), ..., a„(Mi,..., m„) are known for every ui, ..., Un & B. 

Proof. Clearly, (i) implies (ii). Assume that (ii) holds. Then a„(Mi,... ,m„) is known for 
every mi, ..., Un & V since q:„ is n-linear and by Lemma 15. 

Assume that fc > 0 and Q:fc+i(Mi,..., m^+i) is known for every mi, ..., m^+i S V. 
Write Ui = I Kill = where the norm is calculated in Z, not 

in Fp. We show that q;/c(mi, ..., Uk) is known for every mi, ..., m^ S Id by induction on 

Elilkll- 

If for every 1 < i < fc we have ||Mi|| < 1, then ak{ui,... ,Uk) is known by (ii) and by 
Lemma 15. Otherwise we can assume that either mi has two nonzero coefficients, or that 
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Ml has a nonzero coefficient larger than 1. In any case, upon writing ui as a sum of two 
vectors of smaller norm, we are done by the induction hypothesis and by the recurrence 
relation (5.2) for au+i and au- □ 

5.2. Code loops up to isomorphism 


Let us return to code loops of order 64. In the notation of derived forms, we have 
C = P 2 and A = P 3 . The code loop Q is determined by the three forms P, C, A, and 
hence, by Proposition 16, by the values 




(5.3) 


where {ei,..., 65 } is a basis of V, a nd where i < j < k . 

Moreover, Aschbacher shows in ( Aschbacheil 1994ll that two code loops Q, Q' with 
associated triples {P,C,A) and {P',C',A') are isomorphic if and only if {P,C,A) and 
{P',C',A') are equivalent, i.e., there is ijj € GL(I^) such that 

P{u) = P'{iP{u)), C{u,v) = C'{ip{u),tlj(v)), A{u,v,w) = A'{tp{u),ip{v),'tlj{w)) 


for every u, v, w G V. 

In order to construct all nonassociative code loops of order 64, we must first find all 
triples (P, C, A) up to equivalence, where P has combinatorial degree 3. (If the combi¬ 
natorial degree of P is less than 3 then the associator map A = P 3 is trivial and hence 
the resulting loop is a group.) For the convenience of the reader, we give formulae for 
evaluating A, C and P on V based only on (5.3) and on the symmetry of the three forms: 

A(^x^ei,'^yjej,'^Zkek) = y^XiyjZjA{ei,ej,ek), 

i j k 'i,j,k 


CC^Xiei,'^yjej) = '^XiyjC{ei,ej) -f XjXjykAjej, ej, Ck) 

i j i,j k i<j 

+ EE XiyjykA{ei,ej,ek), 

i j<k 

and 

PC^XiCi) = '^XiP(ei) + '^XiXjC{ei,ej) + XiXjXkA{ei,ej,ek), 

i i i<j i<j<k 

where all running indices range from 1 to 5. 

A linear transformation M = {rriij) € GL(14) turns the triple {P,C,A) into a triple 
{P^,C^,A^) according to 

A (e 2 ,ej,ek) — ^ ( m2^777.ji,777.fc^A(e^, e,,, e^), 

u,v,w 

C (Cj, Gj'j — ^ ^ 'kkliuTTljyC ^ ^ ^ ^ 'kn,iuTn,iyfTlj'(j^A(^Cuj 
u,v w u<.v 

+EE 'k^iu^jv^jwA(^€u-i ^V} ^w'): 

u v<.w 
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and 


P 


"(«.) = E P ^ ^ 777-21;(6^^ , ^v') P ^ ^ 777j 22 777j 2 ;777j 22 ;^4^6 


.)• 


u<v 


'1<V<W 


A computer search based on the above formulae produced 80 nonequivalent triples 
{P,C,A). However, it is conceivable (and, in fact, it does happen) that some of the 
associated code loops were already obtained earlier in the search as extensions E{K, F 2 , /) 
for some Moufang loop K of order 32 that is not elementary abelian. It is therefore 
necessary to construct the 80 code loops explicitly and test them for isomorphism against 
the previously found loops. 

There are several ways in which the code loop Q can be rec overed from the triple 
(P, C, A). The first, iterative construction is due to ( Griess . Il986ll . another construction 
(also iterative) using twisted product s was given in ( Hsul . l20(^ . and the most recent 
construction is due to the first author ( Nagy . 2007ll . In the latter paper, Nagy shows that 
there is a one-to-one correspondence between nonequivalent triples (P, C, A), a certain 
class of non- S-isomorphic groups with triality, and code loops. The correspondence of 
(INagvI . I 2 OO 7 II is constructive, and we used it to obtain a concrete description of the 80 
code loops. 


6. Conclusion of the search 


We have by now obtained all Moufang loops of order 64 (resp. 81) by producing all 
central extensions E{K, F 2 , /) (resp. E{K, F 3 , /)), where K is an at least three-generated 
Moufang loop of order 32 (resp. 27) and f : K x K ^ ¥2 (resp. f : K x K ^ F 3 ) is a 
Moufang cocycle modulo coboundaries modulo the action of Aut(if). 

Upon sorting the loops up to isomorphism and discarding groups (which arise when K 
is associative and / is a group cocycle, see Remark 18), we have found 4262 nonassociative 
Moufang loops of order 64 and 5 nonassociative Moufang loops of order 81. This finishes 
the proof of Theorem 3 and the enumerative part of Theorem 4. One can then check, for 
instance in the LOOPS package, that 2 of the 5 nonassociative Moufang loops of order 81 
are commutative, and that the remaining 3 loops are isotopes of the commutative ones. 
We have proved Theorem 4. 

The 4262 nonassociative Moufang loops of order 64 and the 5 nonassociative Moufang 
loops of order 81 are available electronically in the latest version of LOOPS. The command 
MoufcLngLoop(n,m) retrieves the 777 th Moufang loop of order n from the database. 


Remark 17. Based on the discussion in Subsection 1.2, we see that th e classification of 
nona ssociative Moufang loops of order is now complete. Moreover, by (jNagv and Valsecchi 


200711 , the only case missing in the classification of nonassociative Moufang loops of order 


ig 35 _ 243 . The tools used here fall just short of covering this case. (The associated 
systems of linear equations can be solved but the isomorphism problem is too difficult 
for the methods present in the LOOPS package. We believe it could be solved using a 
specialized algorithm for Moufang 3-loops.) 


Remark 18. Given a loop K and an abelian group A we say that f : K x K ^ A is a 
group cocycle if 

f{xy, z) -L f{x, y) = f{x, yz) + f{y, z) 
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holds for every x, y, z G K. When X is a group and / is a group cocycle, E{K, A, /) is 
a group. Group cocycles form a subspace of M{K) containing B{K). 

The reader might wonder why we did not take advantage of group cocycles in the 
search to further cut the dimension of the complement T>[K). (For illustration, when K 
is the elementary abelian group of order 32, the subspace of group cocycles has dimension 
41, compared to diin{B{K)) = 26.) The difficulty is that two (Moufang) cocycles that 
differ by a group cocycle do not necessarily yield isomorphic loops. 


6.1. Technical information 


We conclude the paper with some technical information concerning the search. 

The calculations have been carried twice, on t wo di f ferent computers, and with slightly _ 

differ ent algorithms. We worked within the GAP ( GAP . 20061) package LOOPS ( Nagy and Voitechovskv 
20071) . The GAP code for all algorithms specific to this paper can be downloaded at 
http://www.math.du.edu/~petr in section “Publications”. The code is well commented 
and contains additional details about the search not provided here. 

The total running time of the program on a 2 gigahertz PC with Windows XP oper¬ 
ating system was about 3 hours, out of which about 1 minute was devoted to the case 
n = 81, and about 15 minutes to the elementary abelian case for n = 64. 

For each Moufang loop K of order 32 that is not two-generated the program returned 
a list of IDs of pairwise nonisomorphic nonassociative Moufang loops of order 64 that 
are central extensions of K by F 2 . These 102 lists contained 11434 IDs, with 4262 unique 
IDs, and with maximal multiplicity of an ID equal to 7. Precisely 64 out of the 80 code 
loops of order 64 cannot be obtained as central extensions of any other Moufang loop of 
order 32 than the elementary abelian group. 
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